
CLAIM AMENDMENTS 

1 . (Previously Presented) A method for use in a device coupled to a 
communications channel, comprising: 

determining a security service to perform with a data block; 

generating security information to pass along with the data block, the security 
information identifying the security service; and 

processing, in a computer peripheral device adapted to control communication 
with the communications channel, the data block according to the security information. 

2. (Original) The method of claim 1 , wherein the processing includes performing 
cryptographic processing of the data block. 

3. (Original) The method of claim 1, further comprising: 
receiving the data block from a software routine; and 

routing the processed data block back to the software routine after processing. 

4. (Previously Presented) The method of claim 1, further comprising: 
determining if the security service can be performed by the computer peripheral 

device; and 

if not, processing the data block according to the security service in a software 
routine instead of the computer peripheral device. 

5. (Original) The method of claim 1, further comprising identifying a security 
service according to an Internet Protocol security protocol. 

6. (Previously Presented) A.method for use in a device including a computer 
peripheral device adapted to control communication with a transport medium, comprising: 

receiving data from a routine in the device; 

sending the data to the computer peripheral device to perform cryptographic 
processing of the data; and 
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after cryptographic processing, transmitting the processed data back to the 

routine. 

7. (Previously Presented) The method of claim 6, further comprising sending the 
processed data to the computer peripheral device at least one more time to perform further 
cryptographic processing. 

8. (Previously Presented) A method for use in a device including a computer 
peripheral device adapted to control communication with a transport medium, comprising: 

receiving data from the transport medium; 

determining from a portion of the data if cryptographic processing of the data is to 
be employed; and 

performing, in the computer peripheral device, the cryptographic processing of 

the data. 

9. (Previously Presented) The method of claim 8, wherein the performing of the 
cryptographic processing is performed by a cryptographic engine in the computer peripheral 
device. 

10. (Previously Presented) The method of claim 8, further comprising: 
determining if the cryptographic processing can be performed by the computer 

peripheral device; and 

performing the cryptographic processing in a software routine instead if the 
computer peripheral device is unable to perform the cryptographic processing. 

1 1 . (Previously Presented) An article including a machine-readable storage medium 
containing instructions for execution in a system including a computer peripheral device adapted 
to control communications with a communications channel, the instructions when executed 
causing the system to: 
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identify a security service to be performed on data to be transmitted over the 
communications channel; and 

prepare security control information to pass along with the data to the computer 
peripheral device to perform processing according to the identified security service. 

12. (Previously Presented) The article of claim 1 1 , the storage medium containing 
instructions that when executed further causes the system to perform processing according to the 
identified security service instead of the computer peripheral device if the security service cannot 
be performed by the computer peripheral device. 

13. (Previously Presented) An article including a machine-readable storage medium 
containing instructions for execution in a system including a computer peripheral device adapted 
to control communications with a communications channel, the instructions when executed 
causing the system to: 

receive a data block from the computer peripheral device; 

determine from information in the data block if a security service has been 
performed on the data block by the computer peripheral device; and 

process the data block if the security service has not been performed on the data 
block by the computer peripheral device. 

14. (Previously Presented) The article of claim 13, the storage medium containing 
instructions that when executed causes the system to retrieve security information associated 
with the data block and send the data block and security information to the computer peripheral 
device to perform the security service. 

15. (Original) The article of claim 13, the storage medium containing instructions 
that when executed causes the system to perform the security service on the data block. 

1 6. (Currently Amended) A controller for controlling communications with a 
transport medium, the controller comprising: 
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a receiving circuit to receive data and associated security control information , the 
security control information identifying a security service to be performed on the data ; and 

a cryptographic engine to cryptographically process the data based on the security 
control information, the cryptographic engine being a computer peripheral device. 

17. (Original) The controller of claim 16, further comprising a storage device 
containing information identifying security services to be performed, the received security 
control information selecting a portion of the security services information in the storage device, 
wherein the cryptographic engine processes the data according to the selected portion of the 
security services information. 

18. (Original) The controller of claim 17, further comprising a device adapted to 
change the contents of the storage device to update the security services information. 

19. (Original) The controller of claim 1 8, wherein the device is adapted to update the 
security services information based on a predetermined replacement policy. 

20. (Original) The controller of claim 17, wherein the security services information 
includes security association information. 

2 1 . (Currently Amended) A device coupled to a communications channel, 
comprising: 

an entity capable of generating data for transmission to the communications 

channel; and 

a computer peripheral device adapted to control communication between the 
entity and the communications channel, the controller including an engine to modify the data 
according to a security protocol before transmitting the data to the communications channel and 
a receiving circuit to receive data from the communications channel and security data to identify 
if the received data is subject to cryptographic processing . 
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22. (Original) The device of claim 21, wherein the engine is adapted to perform 
cryptographic processing. 

23. (Previously Presented) The device of claim 21, wherein the computer peripheral 
device includes a network controller. 

24. (Original) The device of claim 21, wherein the entity includes an application 
process. 

25. (Original) The device of claim 21, further comprising a routine adapted to 
generate predetermined security information used by the engine to modify the data according to 
the security protocol. 

26. (Cancelled) 

27. (Previously Presented) The device of claim 26, wherein the computer peripheral 
device further includes a cryptographic engine to perform the cryptographic processing on the 
received data. 
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